Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File: EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier: jy/0mRFyV9c6mQvIM9FQjvcDOQ+PF6gwuCHwj9F1CDc=
Subject key identifier: 50:0F:E3:75:B5:85:DB:D8:27:8B:9D:51:01:C0:40:04:88:4C:5B:0F
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial: 0199FBEC16B42B4BCCDBD4FE382D4FDAFCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: HFa1N9UCSC6g69dtO5tgeoO/jDMrx125AXPWQAlvEMw=)
2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:16:b4:2b:4b:cc:db:d4:fe:38:2d:4f:da:fc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=500fe375b585dbd8278b9d5101c04004884c5b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:16:6c:cd:f9:48:d1:c1:d8:7a:f4:b3:5e:
82:e1:ee:58:02:bd:94:5b:a8:a1:53:bc:c8:5b:81:
d2:40:24:62:43:1f:6c:d0:1c:da:df:17:1b:74:d2:
25:1e:d1:f8:cc:02:e2:52:bd:9f:eb:82:76:8d:9e:
80:19:23:d3:03:88:1f:06:8b:80:e2:a1:b7:8e:c1:
22:8b:cf:de:35:67:24:44:a7:01:43:aa:27:92:d4:
6f:76:57:9c:94:3d:c2:8a:46:8b:de:f7:1b:ca:d5:
72:d2:6c:e1:22:ae:58:1d:a6:16:5e:57:c8:3f:58:
10:c9:4f:ee:52:1b:de:3b:25:9b:52:16:f5:3b:59:
22:ac:c5:f5:f1:72:42:5f:29:3f:6f:b5:33:62:cb:
c6:cf:b0:8f:a0:81:6a:39:12:8d:4d:e8:29:16:6a:
97:9f:1f:f2:98:53:6d:54:d3:1c:61:fd:30:5d:0d:
44:98:ca:3d:73:f9:91:d9:ae:05:70:58:66:73:d1:
52:8e:23:de:ab:43:b7:d3:c0:a6:56:d9:a7:19:e8:
bf:59:d6:11:f6:5f:e2:8a:0e:52:17:d0:3a:6c:82:
51:a1:be:db:66:07:cb:a0:fd:8c:6a:71:fb:b6:64:
3a:0a:0d:a3:bf:46:86:42:c0:cc:b4:69:99:60:15:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0F:E3:75:B5:85:DB:D8:27:8B:9D:51:01:C0:40:04:88:4C:5B:0F
X509v3 Authority Key Identifier:
keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:a7:96:18:19:84:fd:da:8b:6b:b7:5e:ca:07:3d:ca:fa:
55:99:da:c1:67:64:8a:bb:57:d7:7f:fd:af:b2:66:3f:1c:5a:
fb:d2:61:5d:48:be:ca:9c:5f:2a:bc:95:15:a2:ae:d5:cf:b0:
71:0d:b8:28:64:5b:30:62:bc:7a:eb:f0:b0:e1:c9:c7:29:a2:
6b:97:f5:f1:2e:24:af:a8:e4:07:da:9c:8c:41:0b:56:ac:06:
14:59:c5:98:cd:e6:4c:72:d7:fb:fc:b1:7e:7a:17:49:29:ec:
98:59:86:29:b0:f3:d9:69:c5:78:90:bf:a7:89:b1:7b:6e:88:
37:53:87:5a:95:d3:fb:f4:df:68:56:b8:9f:03:84:f9:25:64:
2a:94:80:f2:94:2c:19:f0:66:6e:f1:16:60:b3:ab:a6:0f:8d:
aa:c5:56:94:29:cf:c9:7a:2b:6d:a9:13:07:0c:a0:3d:6c:cd:
93:02:c9:60:7b:67:03:5c:44:04:f8:f1:d9:b6:2f:3d:04:67:
f2:07:f5:fe:db:97:89:38:f4:f7:32:82:f9:30:4e:7d:59:af:
79:b4:71:81:af:d8:32:c3:68:65:6a:ca:02:90:97:b1:6f:90:
aa:8b:eb:1e:21:65:a2:d2:eb:3c:56:85:d2:bc:4d:05:f3:d0:
07:04:3f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77Ba0K0vM29T+OC1P2vzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNmMwZjM5NTQxMGYyODZjODU3NjU3NmQ3ZDJmNzgzMDRi
NWU4M2EwHhcNMjUxMDE5MTAwMjU3WhcNMjUxMDIwMTAwMjU3WjAzMTEwLwYDVQQD
Eyg1MDBmZTM3NWI1ODVkYmQ4Mjc4YjlkNTEwMWMwNDAwNDg4NGM1YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TUWbM35SNHB2Hr0s16C4e5YAr2U
W6ihU7zIW4HSQCRiQx9s0Bza3xcbdNIlHtH4zALiUr2f64J2jZ6AGSPTA4gfBouA
4qG3jsEii8/eNWckRKcBQ6onktRvdleclD3CikaL3vcbytVy0mzhIq5YHaYWXlfI
P1gQyU/uUhveOyWbUhb1O1kirMX18XJCXyk/b7UzYsvGz7CPoIFqORKNTegpFmqX
nx/ymFNtVNMcYf0wXQ1EmMo9c/mR2a4FcFhmc9FSjiPeq0O308CmVtmnGei/WdYR
9l/iig5SF9A6bIJRob7bZgfLoP2ManH7tmQ6Cg2jv0aGQsDMtGmZYBWGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAP43W1hdvYJ4udUQHAQASITFsPMB8GA1UdIwQY
MBaAFBBsDzlUEPKGyFdldtfS94MEteg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQt
MzQwZjQzMzU4NGQyLzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQtMzQwZjQzMzU4NGQy
LzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIinlhgZ
hP3ai2u3XsoHPcr6VZnawWdkirtX13/9r7JmPxxa+9JhXUi+ypxfKryVFaKu1c+w
cQ24KGRbMGK8euvwsOHJxymia5f18S4kr6jkB9qcjEELVqwGFFnFmM3mTHLX+/yx
fnoXSSnsmFmGKbDz2WnFeJC/p4mxe26IN1OHWpXT+/TfaFa4nwOE+SVkKpSA8pQs
GfBmbvEWYLOrpg+NqsVWlCnPyXorbakTBwygPWzNkwLJYHtnA1xEBPjx2bYvPQRn
8gf1/tuXiTj09zKC+TBOfVmvebRxga/YMsNoZWrKApCXsW+QqovrHiFlotLrPFaF
0rxNBfPQBwQ/VA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:31 2025 by rpki-client